ElasticCertified SIEM Analyst
Domain 4Objective 2
Construct Lens Visualizations for Security Use Cases ELASTIC-CERTIFIED-SIEM-ANALYST Practice Questions (Page 2)
Part of the Visualizations domain, which makes up ~13% of our current practice bank.
20questions here
4free pages
10concepts
Questions 6–10
- 6
To create a bar chart showing the count of security events per event.category, where should you place the 'event.category' field?
Select an answer first - 7
To create a time series visualization in Lens, which bucket must you configure?
Select an answer first - 8
In Lens, which configuration element allows you to group data by a field such as 'host.name'?
Select an answer first - 9
Which action in the Lens editor allows you to change the visualization type without losing your current configuration?
Select an answer first - 10
To compare failed login counts across different users in a bar chart, which Lens feature should you use?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Elastic. “ELASTIC-CERTIFIED-SIEM-ANALYST” is a trademark of its owner, used for identification only.